Hi,
I’m running a simple command from the worklet:
/Applications/Falcon.app/Contents/Resources/falconctl uninstall --maintenance-token $Token
I also tried:
sudo /Applications/Falcon.app/Contents/Resources/falconctl uninstall --maintenance-token $Token
With both commands, I’m getting the following error:
“Error: Failed to read password”
Which seems to me that it is prompting for an “admin” password.
I’m running the worklet in a M1 Mac, automox account has a secure token enabled (checked by running: sysadminctl -secureTokenStatus _automoxserviceaccount).
Is it a permissions issue?
If I run a “whoami” from the worklet, it returns: root. So, I would say it is not a permissions issue.
But then why it seems to be prompting for a password?
Thank you for your help.
Question
Automox Service account permission on Mac - CrowdStrike uninstall worklet
Reply
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.